CVE-2026-39951

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.31

Description Cacti, an open source performance and fault management framework, contains a stored SQL injection flaw within the Reports feature. This issue occurs through the graph name regexp variable. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to or manipulation of the database.

Recommendations Update to version 1.2.31.